Attorney's Docket No. 032326-315 
Application No. 
Page 4 

AMENDMENTS TO THE CLAIMS: 

This listing of claims will replace all prior versions, and listings, of claims in the 
application: 

LISTING OF CLAIMS: 

1 . (Currently Amended) a A countermeasure method for i mp l emontation 
executed in an electronic component implementing a public-key cryptography 
algorithm comprising that employs exponentiation computation, with a left-to-right 
type exponentiation algorithm, of the type y=g A d, where g and y are elements of the 
a determined group G written in multiplicative notation, and d is a predetermined 
number, said countermeasure method b e ing charact e riz e d i n that i t includ e s 
including a random draw step, at the start of or during execution of said 
exponentiation algorithm in deterministic or in probabilistic manner, so as to mask 
the an accumulator A. 

2. (Currently Amended) A countermeasure method according to claim 1, 
character i z e d i n that wherein the group G is written in additive notation. 

3. (Currently Amended) A countermeasure method according to claim 1 , 
charact e r i z e d i n that wherein the group G is the multiplicative group of a finite field 
written GF(q A n), where n is an integer. 

4. (Currently Amended) A countermeasure method according to claim 3, 
character i zod i n that wherein the integer is n is equal to 1 : n=1 . 

5. (Currently Amended) A countermeasure method according to claim 4, 
charact e riz e d i n that i t compris e s comprising the following steps: 

1 ) Determine an integer k defining the security of the masking and give 
designate d by the binary representation (d(t), d(t-1 ), d(0)) 

2) Initialize the accumulator A with the integer 1 
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3) 
3a) 



For i from t down to 0, do the following: 
Draw a random X lying in the range 0 to k-1 and replace the 
accumulator A with A+A,.q (modulo k.q) 



3b) Replace A with A A 2 (modulo k.q) 

3c) If d(i)=1 , replace A with A.g (modulo k.q) 

4) Return A (modulo q). 

6. (Currently Amended) A countermeasure method according to claim 4, 
charact e r i z e d i n that i t compr i s e s comprising the following steps: 

1 ) Determine an integer k defining the security of the masking, and give 
designate d by the binary representation (d(t), d(t-1), .... d(0)) 

2) Draw a random X lying in the range 0 to k-1 and initialize the 
accumulator A with the integer 1+X.q (modulo k.q) 

3) For i from t-1 down to 0, do the following: 
3a) Replace A with A A 2 (modulo k.q) 

3b) If d(i)=1 , replace A with A.g (modulo k.q) 

4) Return A (modulo q). 

7. (Currently Amended) A countermeasure method according to claim 2, 
charact e r i z e d i n that wherein the exponentiation algorithm applies to the group G of 
the points of an elliptic curve defined on the finite field GF(q A n). 

8. (Currently Amended) A countermeasure method according to claim 7, 
charact e rized in that it compr i ses comprising the following steps: 

1 ) Initialize the accumulator A=(A x ,A yi A z ) with the (x,y,1 ) triplet and give 
designate d by the binary signed-digit representation (d(t+1), d(t), 
d(0)) with d(t+l)=l 

2) For i from t down to 0, do the following: 

2a) Draw a random non-zero element X from GF(q A n) and replace the 



2b) Replace A=(A x ,A y ,A 2 ) with 2*A=(A Xl A y ,A z ) in Jacobian representation, 



accumulator A=(A Xl A y ,A 2 ) with (X A 2.A X , X A 3.A y , X.A Z ) 



on the elliptic curve 
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2c) If d(i) is non-zero, replace A=(A x ,A y ,A z ) with (A x ,A y ,A z )+d(i)*(x,y,1 ) in 

Jacobian representation on the elliptic curve 
3) If A z =0, return the point at infinity; otherwise return (A X /(A 2 ) A 2, 
A y /(A Z ) A 3). 

9. (Currently Amended) A countermeasure method according to claim 7, 
character i zed i n that i t compr i s e s comprising the following steps: 

1 ) Draw a non-zero random element X from GF(q A n) and initialize the 
accumulator A=(A x ,A y ,A z ) with the (A, A 2.x, X A 3.y, X) triplet and give 
designate d by the binary signed-digit representation (d(t+1), d(t), 
d(0)) with d(t+1)=1 

2) For i from t down to 0, do the following: 

2a) Replace A=(A x ,A y ,A z ) with 2*A=(A x ,A y ,A z ) in Jacobian representation, 

on the elliptic curve 
2b) If d(i) is non-zero, replace A=(A x ,A y ,A z ) with (A x ,A y ,A z )+d(i)*(x,y,1 ) in 

Jacobian representation on the elliptic curve 

3) If A z =0, return the point at infinity; otherwise return (A X /(A Z ) A 2, 
A y /(A Z ) A 3). 

10. (Currently Amended) A countermeasure method according to claim 7, 
charact e r i z e d i n that i t compr i ses comprising the following steps: 

1 ) Initialize the accumulator A=(A x ,A y ,A z ) with the (x,y,1 ) triplet and §ive 

designate d by the binary signed-digit representation (d(t+1 ), d(t) 

d(0)) withd(t+1)=1 

2) For i from t down to 0, do the following: 

2a) Draw a random non-zero element X from GF(q A n) and replace the 
accumulator A=(A x ,A y ,A z ) with (X.A X , X.A y , X.A Z ) 

2b) Replace A=(A x ,A y ,A z ) with 2*A=(A x ,A y ,A z ) in homogeneous 
representation, on the elliptic curve 

2c) If d(i) is non-zero, replace A=(A x ,A y ,A z ) with (A x ,A y ,A z )+d(i)*(x,y,1) in 
homogeneous representation on the elliptic curve 

3) If A z =0, return the point at infinity; otherwise return (A X /A Z| A y /A z ). 
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1 1 . (Currently Amended) A countermeasure method according to claim 7, 
ch a ract e r i z e d i n that it compris e s comprising the following steps: 

1 ) Draw a non-zero random element X from GF(q A n) and initialize the 
accumulator A=(A x ,A yj A z ) with the (A,.x, X.y, X) triplet and give d by the 
binary signed-digit representation (d(t+1) t d(t), d(0)) with d(t+1)=1 

2) For i from t down to 0, do the following: 

2a) Replace A=(A x ,A y ,A z ) with 2*A=(A Xj A y ,A z ) in homogeneous 

representation, on the elliptic curve 
2b) If d(i) is non-zero, replace A=(A x ,A y ,A z ) with (A x ,A y ,A z )+d(i)*(x,y,1 ) in 

homogeneous representation on the elliptic curve 

3) If A z =0, return the point at infinity; otherwise return (A x /A z> A y /A z ). 

12. (Currently Amended) An electronic component using the countermeasure 
method according to any pr e c e ding c l a i m claim 1 . 



